How to configure ASP.NET delegation from impersonation
Background: I've inherited a working site that walks the file server for directory listings and presents the finding on a webpage, all is good. However with the DR migration, and subsequent virtualization, they are moving the IIS Server away from the file server and it has broken the logic. The old server is 2k3 and the new webserver and fileserver are both 2k8r2. I am using windows 7 pro. Observations: From the event viewer -> security, on the old working system I can see a single validated client authenticating, albeit, on the same server as the filesystem. (win2K3) However on the new system I can see that the process that is connecting to the fileserver is SYSTEM, if I hard wire another account in the identity impersonate area of web.config, I can see that user authenticate as it should on the fileserver. I have attempted every authentication combination on the IIS7 server to get it to pass the credentials through, but to no avail. (Win2K8R2) I then read about delegation and I thought it would be my saviour, but alas, no joy their either. I have followed 'How to configure an ASP.NET application for a delegation scenario' but still cant make sence of it. http://support.microsoft.com/kb/810572 The website is utilizing calls: System.IO.Directory.Exists which dont appear to have any authentication options, so I expected that it would use the impersonated user.. If I hardwire a user in the web.config, it works, but defeats the function of being personalized. I currently have ASP.NET impersonation enabled along with Windows Authentication and tried all providers in various orders. I got excited when it suggested I use Kernel-mode authentication, but it did not help, it gave me a 401: 401 - Unauthorized: Access is denied due to invalid credentials. You do not have permission to view this directory or page using the credentials that you supplied. I've been iisreset ing all day, any help would be appreciated. Thanks Greg
May 1st, 2012 3:23am

hi, You might want to ask this question in asp.net forums. This forum focuses on Windows Server General queries/issues. http://forums.asp.net/69.aspx/1?Component+DiscussionsA UNIVERSE without WINDOWS is CHAOS ! This posting is provided "AS IS" with no warranties or guarantees and confers no rights. About Me ?
Free Windows Admin Tool Kit Click here and download it now
May 1st, 2012 3:37am

In addition to Santosh I would also recommend you to post the issue in the IIS forums as you are using Asp.net with IIS. http://forums.iis.net/ http://www.arabitpro.com
May 1st, 2012 5:43am

Thanks Gents, I have posted on both sites, but no reply as yet..Greg
Free Windows Admin Tool Kit Click here and download it now
May 3rd, 2012 12:28am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics